It sees my Ethernet interface, but my wireless interfaces are displayed as "Microsoft" and of coarse don't have a properties of a wireless interfaces! I used to capture packets with my Belkin USB wireless adaptor on CommView, because my built-in wi-fi card doesn't support monitor mode, so I know it works. At that moment I had WinPcap 4.1.1. I tryed to roll back WinPcap, but it didn't help! asked 04 Oct '12, 13:05  Fureous George edited 04 Oct '12, 14:43 |
2 Answers:
First of all, the adapter is just called "Microsoft" because that is the name the driver reported. You can change it at the Prefences -> Capture -> Edit Interfaces -> Comment. Second, if you're capturing on Windows you need AirPCAP adapters to be able to record 802.11 layer information with Wireshark, but I guess you already know that. answered 04 Oct '12, 13:29  Jasper ♦♦ |
You'll have to use CommView (which probably provides its own driver for the adapter) or possibly Microsoft Network Monitor, which will use the adapter's own driver but which has a driver that connects to the adapter driver and, unlike the WinPcap driver, does so in a way that, on Windows Vista and later, supports monitor mode if the adapter's driver does (although there are adapters that have drivers that "support" it but with bugs). (Network Monitor doesn't support monitor mode on Windows XP.) answered 04 Oct '12, 18:42  Guy Harris ♦♦ |
I didn't know that could u explain it in more detail, please?
I'm currently logged on in Mc'Donalds on my built-in card, and one of these interfaces is capturing packets - I don't know if it's the one connected, because I know that u can't be connected if u in a monitor mode, and it must be in a active mode! I want to use my built-in card to connect, and my Belkin to capture!
I disconnected my Belkin USB and my built-in card is capturing packets in active mode! I want to capture packets with Belkin in monitor mode!
Usually - when capturing WiFI - you want to see the radio layer, meaning beacon frames, association requests, signal strength etc. which you can only do on Windows if you use an AirPCAP USB adapter. Of course you can capture on any WiFi card on Windows and see frames but you will not see this radio layer (802.11) unless it is an AirPCAP adapter.
Oh, and Wireshark will most likely not be able to capture on USB network cards on Windows. There are tons of questions here about that topic, for example http://ask.wireshark.org/questions/12791/wireshark-doesnt-detect-usb-datacards